• SAP GRC
• IT Audit
• SOD
• GRC

Murtaza's Portfolio

• Murtaza Abdul Razzaq l xKPMG l xEY l APFA l CISA l CPFA (UK)

About Murtaza

Accomplished IT Audit and Risk Management Professional with over 13 years of expertise in Information
Technology Audit, Information Systems, and Application Security. Demonstrated and successfully managed
complex audits, enhancing control environments, and implementing risk mitigation strategies. Proven ability to
lead multi-dimensional projects and deliver high-quality outcomes in compliance with regulatory requirements.
Adept at identifying vulnerabilities, optimizing processes, and providing strategic insights to senior management.
Career Profile Summary
IT External Audit and IT Internal Audit
• Managed off site IT audit support work of 25 plus clients for 2014 to 2024;
• Simultaneously managed multiple client engagements of varying size, scope and complexity. Starting from
planning, execution and reporting phase, conducting testing of IT Application Controls (ITACs), report testing
and testing corresponding General IT Controls (GITC) over in-scope applications within the entity's control
environment;
• Assisted the core assurance team in testing of client’s General IT Controls (GITC) (Entity Level Controls,
Access Management including Privilege Access, Change Management, Computer Operation and Program
Development) and IT dependent controls (Process Level Controls, Segregation of Duties, Interface Controls
and IPE Controls) related business to support the financial statements enabling reliance over the internal control
environment;
Key Clients Sectors
• Managed, led and executed multiple external audits, internal audits and advisory engagements for Banking,
Insurance, Capital Market, Manufacturing, Oil and Gas, Energy, Telecom, Pharmaceutical and Automobile
sector.
Project Experience
Client: Pakistan State Oil.
Industry: Oil & Gas
Duration: One Month
Role: SAP Team Lead
Project: SAP Authorization & Business Process
Review
Scope: Post implementation Review
Client: ICI Pakistan Limited.
Industry: Manufacture
Duration: Two Month
Role: Internal Auditor
Project: Internal Audit Assessment
Scope: Review SAP R/3 Business Review and Gap
analysis
Client: Lucky Motor Corporation Limited.
Industry: Automobile industry
Duration: One Month
Role: SAP Team Lead
Project: Business Process & SOD Review
Scope: Created SAP GRC S4 HANA Segregation
of Duties and Review for improvement
Business Process and Gaps Analysis
Client: Pakistan Petroleum Limited (PPL)
Industry: Oil & Gas
Duration: One Month
Role: Sap Consultant
Project: System Automation SAP R/3 Tax
Reports
Scope: Review for improvement Business
Process
Client: English Biscuit Manufacturer (EBM)
Industry: Oil & Gas
Duration: 2 Months
Role: Internal Auditor & Consultant
Project: SOD Review
Scope: Review and Recommended SAP GRCs
S4 HANA Segregation of Duties.
Clients:
Continental Biscuit Limited
Linde Pakistan Limited
Macter International
Dalda foods Limited
Tapal Tea Limited
K-Electric Limited
Syngenta Pakistan Limited
Sanofi-Aventis Pakistan Limited